474 lines
8.7 KiB
Bash
Executable File
474 lines
8.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# AUR atomic-lockfile malware check - June 11 2026
|
|
# Sources:
|
|
# https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/
|
|
# https://gr.ht/aur_pkg_list.txt
|
|
|
|
INFECTED_PKGS=(
|
|
123pan-bin
|
|
1code
|
|
8192eu-dkms-git
|
|
actual-ai
|
|
adblock2privoxy
|
|
aion-git
|
|
albion-online-launcher-bin
|
|
alienfx
|
|
alvr
|
|
android-signapk
|
|
android-signapk-gui
|
|
annobin
|
|
ansible-language-server
|
|
antfs-cli-git
|
|
anythingllm-appimage
|
|
anythingllm-cli-bin
|
|
apk-installer-gui
|
|
apm_planner-bin
|
|
apothem
|
|
apple-music-desktop
|
|
arch-update-vai
|
|
archjh
|
|
archlinux-themes-slim
|
|
archmage
|
|
archtex-git
|
|
artanis-git
|
|
astro-editor-appimage
|
|
autohand-cli
|
|
autolabel
|
|
autologin
|
|
azurlaneautoscript
|
|
bcachefs-kernel-dkms-git
|
|
beebeep
|
|
bitcoin-core-git
|
|
blinkenlib
|
|
blueproximity-py3-git
|
|
booklore
|
|
brow6el
|
|
brow6el-git
|
|
canon-pixma-mg3000-complete-fixed
|
|
cartridge-cli
|
|
ccase-bin
|
|
ccl-git
|
|
cgminer
|
|
charcoal
|
|
cinny-desktop-system-tray
|
|
clai
|
|
clang19
|
|
clash-mi
|
|
cling-git
|
|
cmuclmtk
|
|
cnijfilter-common
|
|
codenomad-bin
|
|
codeql-cli-bin
|
|
cogpit-bin
|
|
colorhug-client
|
|
colorz
|
|
compiler-rt19
|
|
compizconfig-python
|
|
coolreader
|
|
cowdancer
|
|
cutefish-calculator
|
|
cutefish-core
|
|
cutefish-dock
|
|
cutefish-filemanager
|
|
cutefish-icons
|
|
cutefish-launcher
|
|
cutefish-qt-plugins
|
|
cutefish-screenlocker
|
|
cutefish-screenshot
|
|
cutefish-settings
|
|
cutefish-statusbar
|
|
cutefish-wallpapers
|
|
cvs-feature-bin
|
|
cynthiune.app
|
|
dagu-bin
|
|
datatype99
|
|
deheader
|
|
dep
|
|
dh-python
|
|
difi
|
|
difi-bin
|
|
doctoc
|
|
dots-hyprland-fork-git
|
|
dvdrip
|
|
dyad-bin
|
|
easy_spice
|
|
edconv-bin
|
|
eisl
|
|
epson-inkjet-printer-escpr2-clos-bin
|
|
exodus-wallet-bin
|
|
exoduswallet
|
|
farmmod-hub
|
|
fastoggenc
|
|
fastjet
|
|
fatx
|
|
fcitx5-pinyin-sougou-dict-git
|
|
ffmpeg-bitrate-stats
|
|
ffmpeg-quality-metrics
|
|
findpkg-git
|
|
firefox-extension-adnauseam-bin-amo
|
|
firmium-desktop-git
|
|
fishui
|
|
fishui-git
|
|
flexiblas
|
|
flynarwhal
|
|
fmlib
|
|
forgecode-bin
|
|
formidable-bin
|
|
frame
|
|
ftl
|
|
frutool
|
|
futhark-bin
|
|
gdl
|
|
gdlmm
|
|
git-annex-standalone
|
|
gnome-contacts-git
|
|
gnutls3.8.9
|
|
gopher2600
|
|
gopher2600-bin
|
|
gosh
|
|
gpx-viewer
|
|
graveman
|
|
green-tunnel-bin
|
|
greetd-wlgreet-git
|
|
gtkimageview
|
|
guile-reader
|
|
gummy
|
|
gummy-git
|
|
hackmatrix-git
|
|
harmony-wad
|
|
headphones
|
|
hearthstone-linux-gui-appimage
|
|
hearthstone-linux-gui-bin
|
|
hepmc2
|
|
hister-git
|
|
hnswlib-git
|
|
horst
|
|
hydownloader-git
|
|
hydrus-git
|
|
i3bar-river
|
|
ianny-bin
|
|
ibm-sw-tpm2
|
|
ihaskell-git
|
|
imageglass
|
|
inadyn
|
|
indicator-session
|
|
infnoise-openssl-git
|
|
interface99
|
|
ios-webkit-debug-proxy
|
|
ipfs-desktop-bin
|
|
ipsw
|
|
iron-heart-git
|
|
jasp-desktop
|
|
jd-gui
|
|
k3sup
|
|
kdb
|
|
kddockwidgets-git
|
|
kexi
|
|
kiss
|
|
ktea
|
|
kookbook
|
|
kproperty
|
|
kreport
|
|
latex-digsig
|
|
lazylpsolverlibs-git
|
|
lesstif
|
|
lib32-egl-wayland
|
|
libafterimage
|
|
libbobcat
|
|
libcutefish
|
|
libffi-static
|
|
libgdata
|
|
libjxl-noglycin
|
|
libquvi
|
|
libquvi-scripts
|
|
libretro-hatari-enhanced-git
|
|
libxdiff
|
|
libxml-ruby
|
|
libyami
|
|
linux-cachyos-deckify-native
|
|
linux-cachyos-native
|
|
linux-cachyos-rc-native
|
|
linux-tool
|
|
liri-cmake-shared-git
|
|
lite
|
|
lll
|
|
llvm-cbe-git
|
|
lowfi-bin
|
|
"ls++"
|
|
lucidvideo
|
|
m5rcode
|
|
magpie-wm
|
|
mako-center-git
|
|
manuskript
|
|
maszyna-git
|
|
mathsat-5
|
|
matrixbrandy
|
|
mcp-probe
|
|
mcpatcher
|
|
mermaid-ascii-git
|
|
mermark-editor
|
|
mesa-dlss-reflex-git
|
|
mimic-node-git
|
|
mingw-w64-geos
|
|
mingw-w64-libsndfile
|
|
minimax-bin-hardened
|
|
misuzu-music-bin
|
|
mono-addins
|
|
monochrome
|
|
monochrome-git
|
|
moor-git
|
|
mount-gtk
|
|
mopen
|
|
n1-translator
|
|
naemon
|
|
naemon-livestatus
|
|
natapp
|
|
nebuchadnezzar-git
|
|
neovim-autopairs-git
|
|
neovim-nvim-treesitter
|
|
nerf-pi
|
|
neuro-karaoke-wrapper-git
|
|
new-api-privacy-filter
|
|
new-api-privacy-filter-git
|
|
nexus-bin
|
|
nginx-mod-vts
|
|
nhentai-git
|
|
nocodb
|
|
noctyra-dotfiles-git
|
|
"notepad---bin"
|
|
nox-bin
|
|
nrpe
|
|
nwchem-bin
|
|
ob-xd
|
|
octocode
|
|
opencode-codebase-index-bin
|
|
openui5
|
|
opl-synth
|
|
optimizevideo-git
|
|
oracle-bin
|
|
pacforge
|
|
paper-desktop-bin
|
|
paq8o
|
|
parallel-python
|
|
pass-cli
|
|
pelican-git
|
|
penguin-subtitle-player
|
|
perl-proc-parallelloop
|
|
perl-set-object
|
|
perl-term-extendedcolor
|
|
phonon-qt5-vlc
|
|
php-geoip
|
|
php-memcache
|
|
php-openswoole-git
|
|
php-xdiff
|
|
picom-ftlabs-git
|
|
pidgin-kwallet
|
|
pipetoys
|
|
pipewire-visualizer-git
|
|
premake-git
|
|
prisma4postgres-bin
|
|
profile-sync-daemon-zen
|
|
pymacs
|
|
pypiserver
|
|
pypy-setuptools
|
|
python-argdispatch
|
|
python-awkward
|
|
python-calmjs
|
|
python-celery
|
|
python-ci-info
|
|
python-coolname
|
|
python-cu2qu-git
|
|
python-dataproperty
|
|
python-dbapi-compliance
|
|
python-dictobject
|
|
python-dj-database-url
|
|
python-fastmcp-slim
|
|
python-finnhub-python
|
|
python-firebase-admin
|
|
python-fmu_manipulation_toolbox
|
|
python-future
|
|
python-g4f
|
|
python-hist
|
|
python-histoprint
|
|
python-hsaudiotag3k
|
|
python-iminuit
|
|
python-iso3166
|
|
python-isr-git
|
|
python-jsmin
|
|
python-json2xml
|
|
python-luckydonald-utils
|
|
python-milvus-lite-bin
|
|
python-mmcif
|
|
python-monotonic
|
|
python-mplhep
|
|
python-mplhep_data
|
|
python-netaudio-git
|
|
python-netaudio-lib
|
|
python-newspaper4k
|
|
python-nipype
|
|
python-nodejs-wheel
|
|
python-openai-harmony
|
|
python-pdf2docx
|
|
python-piecash
|
|
python-pluginmgr
|
|
python-poetry-plugin-dotenv
|
|
"python-pushbullet.py"
|
|
python-pychromecast-git
|
|
python-pylsp-rope
|
|
python-pymilvus
|
|
python-pysocks-git
|
|
python-rembg
|
|
python-scikit-hep-testdata
|
|
python-sklearn-pandas
|
|
python-sqliteschema
|
|
python-starlette-compress
|
|
python-starsessions
|
|
python-steamcontroller-git
|
|
python-tabledata
|
|
python-tarantool
|
|
python-tradingeconomics
|
|
python-uhi
|
|
python-uproot
|
|
python-vector
|
|
python-xtarfile
|
|
python2-appdirs
|
|
python2-fusepy
|
|
python2-lazr-uri
|
|
python2-mutagen
|
|
python2-notify
|
|
python2-packaging
|
|
python2-paver
|
|
python2-pyparsing
|
|
python2-simplejson
|
|
python2-simpleparse
|
|
python2-stomper
|
|
python2-twodict-git
|
|
python2-xlib
|
|
qhttpengine
|
|
qlementine
|
|
qmdnsengine
|
|
qnapi
|
|
qobuz-player-bin
|
|
qtum-core
|
|
quickswitch-i3
|
|
r-dbplyr
|
|
reactphysics3d
|
|
repoporge
|
|
retibbs-client-git
|
|
rhythmbox-git
|
|
rimworld
|
|
rog-helper-git
|
|
ros2-humble-nav2-msgs
|
|
ruah-orch
|
|
ruby-excon
|
|
ruby-kramdown-rfc2629
|
|
ruby-selenium-webdriver
|
|
runescape-launcher
|
|
sakura-launcher-gui
|
|
sandlock
|
|
screenpipe-bin
|
|
sdcc-bin
|
|
seahorse-nautilus
|
|
shhmsg
|
|
shhopt
|
|
slipnet
|
|
slipnet-bin
|
|
smenu
|
|
smenu-git
|
|
smolrtsp
|
|
smolrtsp-libevent
|
|
snry-shell-qs
|
|
soapyptezuka
|
|
solara-kernel-headers
|
|
sonosano
|
|
soundpaad-bin
|
|
sshuttlee
|
|
sshuttlee-bin
|
|
stompbox-jack-git
|
|
stripe-cli
|
|
stylelint-config-recommended
|
|
subbrute
|
|
sublist3r-git
|
|
subprocess
|
|
subsync
|
|
svu
|
|
sway-xkb-switcher
|
|
tack
|
|
tarantool
|
|
tesseract-gui
|
|
thunar-nextcloud-plugin
|
|
thunderbird-conversations
|
|
tinyemu
|
|
tlpui-git
|
|
torch7-git
|
|
touchhle
|
|
touchosc-bin
|
|
transcreen
|
|
tsm
|
|
ttf-material-design-icons-git
|
|
tunacode-cli
|
|
typing-game-cli
|
|
ukui-notification-daemon
|
|
vapoursynth-preview-git
|
|
vbam-git
|
|
verso-git
|
|
vidcutter
|
|
vim-easymotion
|
|
vim-gitgutter
|
|
vim-indent-object
|
|
vim-molokai
|
|
vim-solidity
|
|
vim-vital
|
|
vocalinux-git
|
|
voquill-gpu
|
|
wallpaper-generator-next
|
|
wayland-static
|
|
we-layerd-git
|
|
whatsie-git
|
|
whisper2tr
|
|
whisper2tr-git
|
|
windowmaker-git
|
|
wine-nine
|
|
wire-desktop
|
|
word-snatchers-cli
|
|
workbench
|
|
workbuddy-bin
|
|
wrystr-git
|
|
wsjtx-beta
|
|
xf86-input-mtrack-git
|
|
xorg-xfsinfo
|
|
xplot
|
|
xpra-html5
|
|
xray-domain-list-community
|
|
yarg
|
|
yt6801-dkms
|
|
yy
|
|
zathura-gruvbox-git
|
|
zerx-lab-dida-bin
|
|
zerx-lab-zed-nightly-bin
|
|
zing-8-bin
|
|
zing-17-bin
|
|
zing-21-bin
|
|
zinnia-python
|
|
zsdx
|
|
)
|
|
|
|
echo "Checking for infected AUR packages (${#INFECTED_PKGS[@]} total)..."
|
|
echo
|
|
|
|
found=()
|
|
for pkg in "${INFECTED_PKGS[@]}"; do
|
|
if pacman -Qi "$pkg" &>/dev/null; then
|
|
found+=("$pkg")
|
|
fi
|
|
done
|
|
|
|
if [[ ${#found[@]} -eq 0 ]]; then
|
|
echo "Clean: none of the known infected packages are installed."
|
|
else
|
|
echo "WARNING: ${#found[@]} infected package(s) found:"
|
|
for pkg in "${found[@]}"; do
|
|
echo " - $pkg"
|
|
done
|
|
fi |